By default, honor umask of the user when saving attachments, but offer a config entry (without user interface) for those who explicitely don't like that ([General] section, disregardUmask boolean)